Skip to content
OpenAdvisories

Package · Maven

com.github.junrar:junrar

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-86071

    Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root

    Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/github/junrar/LocalFolderExtractor.java can create directories outside the intended extraction root when processing a crafted archive entry. L…

    junrar junrar com.github.junrar:junrar Maven